| ... | @@ -12,32 +12,32 @@ follow this [template](howto/template) to ensure proper documentation. |
... | @@ -12,32 +12,32 @@ follow this [template](howto/template) to ensure proper documentation. |
|
|
|
|
|
|
|
Those are services managed by TPA directly.
|
|
Those are services managed by TPA directly.
|
|
|
|
|
|
|
|
| Service | Purpose | URL | Maintainers | Documented | Auth |
|
|
| Service | Purpose | URL | Maintainers | Documented | Auth |
|
|
|
|----------------------|-----------------------------------|--------------------------------------|----------------------|------------|---------------------------------------------------------------------|
|
|
|----------------------|-----------------------------------|-------------------------------------|----------------------|------------|---------------------------------------------------------------------|
|
|
|
| [backup][] | Backups | N/A | TPA | 75% | N/A |
|
|
| [backup][] | Backups | N/A | TPA | 75% | N/A |
|
|
|
| [dns][] | domain name service | N/A | TPA | 10% | N/A |
|
|
| [dns][] | domain name service | N/A | TPA | 10% | N/A |
|
|
|
| [documentation][] | documentation (this wiki) | <https://help.torproject.org/> | TPA | 10% | see GitLab |
|
|
| [documentation][] | documentation (this wiki) | <https://help.torproject.org/> | TPA | 10% | see GitLab |
|
|
|
| [donate-review][] | donate-neo review apps | `*.donate-review.torproject.org` | TPA | 25% | N/A |
|
|
| [donate-review][] | donate-neo review apps | `*.donate-review.torproject.org` | TPA | 25% | N/A |
|
|
|
| [drbd][] | disk redundancy | N/A | TPA | 10% | N/A |
|
|
| [drbd][] | disk redundancy | N/A | TPA | 10% | N/A |
|
|
|
| [email][] | @torproject.org emails services | N/A | TPA | 0% | LDAP, Puppet |
|
|
| [email][] | @torproject.org emails services | N/A | TPA | 0% | LDAP, Puppet |
|
|
|
| [ganeti][] | virtual machine hosting | N/A | TPA | 90% | no |
|
|
| [ganeti][] | virtual machine hosting | N/A | TPA | 90% | no |
|
|
|
| [grafana][] | metrics dashboard, pretty graphs | `https://grafana.torproject.org` | TPA, anarcat | 10% | [Puppet](https://gitlab.torproject.org/tpo/tpa/team/-/issues/40124) |
|
|
| [grafana][] | metrics dashboard, pretty graphs | <https://grafana.torproject.org> | TPA, anarcat | 10% | [Puppet](https://gitlab.torproject.org/tpo/tpa/team/-/issues/40124) |
|
|
|
| [ipsec][] | VPN | N/A | TPA | 30% | Puppet |
|
|
| [ipsec][] | VPN | N/A | TPA | 30% | Puppet |
|
|
|
| [kvm][] | virtual machine hosting | N/A | TPA, weasel, anarcat | 20% | no |
|
|
| [kvm][] | virtual machine hosting | N/A | TPA, weasel, anarcat | 20% | no |
|
|
|
| [ldap][] | host and user directory | <https://db.torproject.org> | TPA | 90% | yes |
|
|
| [ldap][] | host and user directory | <https://db.torproject.org> | TPA | 90% | yes |
|
|
|
| [logging][] | centralized logging | N/A | TPA | 10% | no |
|
|
| [logging][] | centralized logging | N/A | TPA | 10% | no |
|
|
|
| [nagios][] | alerting | `https://nagios.torproject.org` | TPA | 5% | Puppet and on-server |
|
|
| [nagios][] | alerting | <https://nagios.torproject.org> | TPA | 5% | Puppet and on-server |
|
|
|
| [object-storage][] | S3-like object storage | N/A | TPA | 100% | access keys |
|
|
| [object-storage][] | S3-like object storage | N/A | TPA | 100% | access keys |
|
|
|
| [openstack][] | virtual machine hosting | N/A | TPA | 30% | yes |
|
|
| [openstack][] | virtual machine hosting | N/A | TPA | 30% | yes |
|
|
|
| [postgresql][] | database service | N/A | TPA | 80% | no |
|
|
| [postgresql][] | database service | N/A | TPA | 80% | no |
|
|
|
| [prometheus][] | metrics collection and monitoring | `https://prometheus.torproject.org/` | TPA, anarcat | 90% | no |
|
|
| [prometheus][] | metrics collection and monitoring | <https://prometheus.torproject.org> | TPA, anarcat | 90% | no |
|
|
|
| [puppet][] | configuration management | `puppet.torproject.org` | TPA | 100% | yes |
|
|
| [puppet][] | configuration management | `puppet.torproject.org` | TPA | 100% | yes |
|
|
|
| [static-component][] | static site mirroring | N/A | TPA | 90% | LDAP |
|
|
| [static-component][] | static site mirroring | N/A | TPA | 90% | LDAP |
|
|
|
| [static-shim][] | static site / GitLab shim | N/A | TPA | | no |
|
|
| [static-shim][] | static site / GitLab shim | N/A | TPA | | no |
|
|
|
| [status][] | status dashboard | N/A | anarcat | | no |
|
|
| [status][] | status dashboard | N/A | anarcat | | no |
|
|
|
| [survey][] | limesurvey instance | N/A | TPA, lavamind | 50% | yes |
|
|
| [survey][] | limesurvey instance | N/A | TPA, lavamind | 50% | yes |
|
|
|
| [tls][] | X509 certificate management | N/A | TPA | 50% | no |
|
|
| [tls][] | X509 certificate management | N/A | TPA | 50% | no |
|
|
|
| [wkd][] | OpenPGP certificates distribution | N/A | TPA | 10% | yes |
|
|
| [wkd][] | OpenPGP certificates distribution | N/A | TPA | 10% | yes |
|
|
|
|
|
|
|
|
The `Auth` column documents whether the service should be audited for
|
|
The `Auth` column documents whether the service should be audited for
|
|
|
access when a user is retired. If set to "LDAP", it means it should be
|
|
access when a user is retired. If set to "LDAP", it means it should be
|
| ... | | ... | |
